Browse CVEs

CRITICAL 9.1 CVE-2024-31611 SeaCMS 12.9 has a file deletion vulnerability via admin_template.php. Seacms No fix yet Fix from $2,3002024-06-10 HIGH 8.8 CVE-2024-30565 An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php. Seacms No fix yet Fix from $1,9502024-04-04 CRITICAL 9.8 CVE-2024-29275 SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive informatio… Seacms No fix yet Fix from $2,3002024-03-22 HIGH 8.8 CVE-2023-46987 SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php. Seacms Mitigation only Fix from $1,9502023-12-28 MEDIUM 5.4 CVE-2023-50470 A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTM… Seacms No fix yet Fix from $1,6002023-12-28 CRITICAL 9.8 CVE-2023-46010 An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component. Seacms after 12.9 Fix from $2,3002023-10-25 HIGH 8.8 CVE-2023-44846 An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component. Seacms after 12.8 Fix from $1,9502023-10-10 HIGH 8.1 CVE-2023-44848 An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php component. Seacms after 12.8 Fix from $1,9502023-10-10 HIGH 7.2 CVE-2023-44847 An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component. Seacms after 12.8 Fix from $1,9502023-10-10 CRITICAL 9.8 CVE-2023-44169 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-44170 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-44171 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-44172 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-43216 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-43222 SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file. Seacms 12.8+ Fix from $2,3002023-09-27 HIGH 8.8 CVE-2023-43278 A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account. Seacms after 12.8 Fix from $1,9502023-09-25 MEDIUM 5.4 CVE-2023-37124 A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML … Seacms No fix yet Fix from $1,6002023-07-06 MEDIUM 5.4 CVE-2023-37125 A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrary web scr… Seacms No fix yet Fix from $1,6002023-07-06 MEDIUM 6.5 CVE-2023-2926 A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the comp… Seacms No fix yet Fix from $1,6002023-05-27 CRITICAL 9.8 CVE-2023-0960 A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config… Seacms No fix yet Fix from $2,3002023-02-22 HIGH 7.2 CVE-2022-48093 Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php. Seacms No fix yet Fix from $1,9502023-02-01 CRITICAL 9.8 CVE-2021-39426 An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter whe… Seacms No fix yet Fix from $2,3002022-12-15 CRITICAL 9.8 CVE-2022-43256 SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php. Seacms 12.6+ Fix from $2,3002022-11-16 HIGH 7.2 CVE-2022-28076 Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings. Seacms No fix yet Fix from $1,9502022-05-04 CRITICAL 9.8 CVE-2022-27336EPSS 21% Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php. Seacms No fix yet Fix from $2,3002022-04-27 CRITICAL 9.8 CVE-2022-23878 seacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php. Seacms No fix yet Fix from $2,3002022-03-02 CRITICAL 9.8 CVE-2021-37358 SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component "admin_ajax.php?action=checkrepeat&v… Seacms No fix yet Fix from $2,3002021-08-18 MEDIUM 6.1 CVE-2021-29313 Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_video.php, Seacms No fix yet Fix from $1,6002021-08-17 MEDIUM 6.5 CVE-2020-28846 Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin account. Seacms No fix yet Fix from $1,6002021-08-17 MEDIUM 6.1 CVE-2020-26642 A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary we… Seacms No fix yet Fix from $1,6002021-05-28